You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/alerts/monitors/create-monitor.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -242,16 +242,16 @@ Log monitor triggers are evaluated by balancing the requirement of timely alert
242
242
To fully leverage AI-driven alerts for metrics monitors, you'll need:
243
243
244
244
***Automation Service**. Required for linking playbooks to metrics-based monitors.
245
-
***Metrics data**. Metrics data must be sent to Sumo Logic for anomaly detection.
246
-
***Metrics aggregation**. Queries that return multiple time series should be aggregated (for example, using `sum` or `avg` operators) before applying anomaly detection.
245
+
***Metrics data**. Our anomaly detection uses at least 30 days of your Sumo Logic metrics data history to establish baseline of the metrics signal and the underlying system behavior.
246
+
***Metrics aggregation**. Queries should be aggregated (for example, using `sum` or `avg` operators) before applying anomaly detection.
247
247
248
248
Examples:
249
249
250
250
***Cluster anomalies detection**. A user configures alerts for anomalies when 5 out of 10 data points in a 10-minute window exceed the baseline, allowing for precision in volatile environments.
251
251
***Automating resolution with playbooks**. A playbook responds to CPU usage anomalies by gathering logs, notifying teams, and restarting affected servers.
252
252
253
253
:::info Limitations
254
-
Anomaly detection applies to one time series at a time. Multi-time series queries must be aggregated before detection.
254
+
Anomaly detection applies to one time series at a time. All metrics anomaly monitor trigger queries must have aggregation applied at the end of the query before detection.
0 commit comments